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ABSTRACT 

In  this  work,  we  analyze  the  effects  of  hardware  faults  on  the  per¬ 
formance  of  computer-implemented  signal  detectors,  as  measured  by  the 
probability  of  detection  and  the  probability  of  false  alarm.  We  derive 
performance  bounds  for  three  implementations:  (i)  no  redundancy,  (ii) 
error  masking  through  strict  redundancy,  and  (iii)  error  detection  and 
masking  through  strict  redundancy. 
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I.  INTRODUCTION 

Given  a  data  sample  of  fixed  size,  a  non-sequential  detector  gen¬ 
erates  a  decision  variable  d^.  If  d*  =  1,  we  decide  that  the  signal  is 
present,  and  if  d#  =  0  we  decide  that  the  signal  is  absent.  Let  S  be 
the  event  that  the  signal  is  present  and  let  Sc  be  the  event  that  the 
signal  is  absent.  The  performance  of  the  detector  is  generally  measured 
by  the  probability  of  detection  P  and  the  probability  of  false  alarm 

PFA*'  wllere 

PD,  -  P(d.-llS) 

PFA*  "  P<d."1lsC>- 

Existing  treatments  (see,  for  example,  [1])  of  such  detection  prob¬ 
lems  implicitly  assume  that  the  detector  is  implemented  on  hardware  that 
is  never  faulty.  In  reality,  the  computational  hardware  used  to  compute 
the  the  decision  variable  is  liable  to  failures.  It  is  therefore  rea¬ 
sonable  to  analyze  the  effect  of  possible  hardware  failures  on  the 
detector  performance  criteria  and  to  ascertain  if  the  possibility  of 
failures  can  or  cannot  be  neglected. 


II.  HARDWARE  FAULT  EFFECTS 

Suppose  that  the  detector  is  implemented  on  a  computing  device 
which  calculates  a  decision  variable  d  .  The  performance  measures  for 
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the  implemented  detector  are 


PD  =  P(d1=l|S) 


P 


FA 


P(d1=l|SC) . 


One  would  like  the  implemented  detector  to  have  the  same  performance  as 
the  theoretical  detector.  This  will  obviously  be  the  case  if  one 
assumes  that  the  computed  decision  variable  d^  is  always  equal  to  the 
theoretical  decision  variable  d#.  All  existing  treatments  of  the  signal 
detection  problem  tacitly  make  this  assumption.  We  will  now  determine 
the  maximum  performance  degradation  that  can  occur  when  such  an  assump¬ 
tion  is  not  made.  Instead,  we  shall  assume  that  the  presence  of  the 
signal  and  the  value  of  the  theoretical  decision  variable  d*  are  each 
independent  of  the  correctness  of  the  computations.  Precisely,  we  shall 
assume  the  following: 


Hypothe sis  1_:  The  events  S  and  (d^=l)  are  each  independent  of  the  event 

(d^d*) . 

We  can  now  establish  the  following  theorem.  All  proofs  appear  in 
the  appendix. 


Theorem  1_:  If  Hypothesis  1  is  satisfied,  then 


PD  2  P<d1-d,)PD, 

PFA  i  1  -  P<dl=a.Hl  -  PFA,>. 


5 


Now  if  the  computing  device  is  non-faulty,  the  computed  decision 
variable  will  equal  the  theoretical  decision  variable.  Therefore,  if  q 
is  the  probability  that  the  computing  device  is  non-faulty,  then 

P(d1=d4e)  2  q 

and  the  following  corollary  is  immediately  obtained. 

Corollary  1:  If  Hypothesis  1  is  satisfied,  then 

PD  i  1PD.  U) 

PFA  ^  1  ~  ^ 

Equations  (1)  and  (2)  show  that  the  actual  performance  of  the 
hardware-implemented  detector  may  be  quite  different  from  the  theoreti¬ 
cal  performance.  For  example,  assume  that  a  theoretical  detector  has 

=  10  Even  if  this  detector  is  implemented  on  a  computing  device 

-4 

with  q  =  0.9999,  Pp^  may  be  as  high  as  10  ,  two  orders  of  magnitude 

larger  than  PFA*  * 


III.  PERFORMANCE  USING  ERROR  MASKING 

One  way  to  possibly  minimize  detector  performance  degradation  in 
the  presence  of  hardware  faults  is  to  use  an  error  masking  scheme  based 
on  hardware  redundancy.  To  implement  such  a  scheme  we  replicate  the 
original  computing  device  a-1  times,  send  the  original  data  sample  to 
each  device,  and  then  send  all  the  device  outputs  d  ,  d0 , . . . ,  d  to  an 
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error  masker  which  chooses  an  index  i(m)  in  the  set  {1,  2 ,  a}.  The 

masker  makes  its  choice  by  first  partitioning  the  set  of  device  outputs 
into  two  blocks  such  that  all  the  outputs  in  a  given  block  are  identi¬ 
cal,  and  then  by  choosing  the  index  i(m)  at  random  from  among  the 
indices  of  the  outputs  in  the  block(s)  of  maximal  cardinality.  The  out¬ 
put  of  the  error  masker  is  then  d. ,  The  decision  concerning  the 

presence  or  absence  of  the  signal  is  made  using  the  variable  d., 

i(m; 

4 

When  this  error  masking  scheme  is  used,  the  performance  measures  of 
the  implemented  signal  detector  are  the  probability  of  detection  P  T(a) 
and  the  probability  of  false  alarm  ^(a),  which  are  now  defined  as 

follows : 


PD,I(»>  “  P(di(m)-1'  S» 


W“>  '  P(ii(«)=11  S°> 


The  classical  approach  [2]  to  the  analysis  of  such  an  error  masking 

scheme  is  based  on  assumptions  which  ensure  that  d.,  v  is  alwavs  eaual 

i (m)  J  H 

to  d #,  in  which  case  P^  j(a)  =  P^#  and  Pp^  j(a)  =  Pp^# .  For  example, 
one  might  put  an  upper  bound  on  the  number  of  computing  devices  that  can 
produce  incorrect  results.  Since  we  feel  that  such  assumptions  are  phy¬ 
sically  unreasonable,  we  shall  instead  assume  that  the  presence  of  the 
signal  and  the  value  of  the  theoretical  decision  variable  d*  are  each 
independent  of  the  correctness  of  the  masker  output.  Thus,  we  are 


assuming  the  following: 
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Hypothesis  2:  The  events  S  and  (d#=l)  are  each  independent  of  the  event 

(d .  /  v=d  J. 
i(m)  * 

The  following  theorem  gives  bounds  on  the  performance  measures  of 
the  detector  when  implemented  with  an  error  masker. 

Theorem  2.:  If  Hypothesis  2  is  satisfied,  then 


PD,I(a)  1  P(d 


PFA,I(d)  *  1  -  P(diU)=d.)(1  -PFA.>' 


The  bounds  given  above  are  not  very  useful  unless  we  can  evaluate 
P(di(m)=d*)-  As  a  first  step,  we  shall  make  the  following  assumption 
concerning  the  error  masker. 

Hypothesis  3,:  The  error  masker  is  never  faulty. 

Let  G(a,y)  be  the  probability  that  at  most  y  device  outputs  are  not 
equal  to  d^.  It  is  clear  that  under  Hypothesis  3,  if  a  is  odd,  the  out¬ 
put  d. ,  v  of  the  masker  is  equal  to  d.  if  and  only  if  at  most  device 

outputs  are  not  equal  to  d.;  and  if  a  is  even,  d.,  .  is  equal  to  d.  if 

*  1  Un;  * 

a _  2  Q 

at  most  — — ,  and  only  if  at  most  — ,  device  outputs  are  not  equal  to  d*. 
Thus,  the  following  lemma  has  been  proved. 

Lemma  1.:  If  Hypothesis  3  is  satisfied,  then 


p(di(m)=d*)  =  G(a,^~) ,  a  odd 
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G(a't>  i  p(di(„)=d.> 


2  Gla,^1), 


a  even. 


In  order  to  explicitly  relate  the  performance  bounds  to  hardware 
reliability,  we  shall  make  the  following  assumption. 


Hypothesis  4.: 

(i)  Each  computing  device  has  the  same  probability  q  of  being  non- 
f aulty 

(ii)  The  computing  devices  fail  independently. 


Let  H(a,y)  be  the  probability  that  at  most  y  devices  are  faulty. 
Hypothesis  4  implies 


H(a,y) 


a! 


r 

A  j ! (a_j) ! 


(l-q)jq(a"j) 


(3) 


It  is  clear  that  if  at  most  y  devices  are  faulty,  then  at  most  y 
device  outputs  will  not  equal  d#,  and  thus 

G(a,y)  2  H(a,y) .  (4) 


In  view  of  the  preceding  discussion,  the  following  corollary  is 
immediately  obtained. 

Corollary  2:  If  Hypotheses  2,  3  and  4  are  satisfied,  then 

PD.I<«>  2  RjUJP,,.  (5) 


pFa,i<°>  1  1  -  RjlaHl  -  PFA.) 


(6) 


where 
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Rj(a)  =  H(a,^~),  a  odd  (7) 

Rj(a)  =  H ,  a  even  (8) 

and  where  H(.,.)  is  given  by  (3). 


IV.  PERFORMANCE  USING  ERROR  DETECTION  AND  MASKING 


Another  way  to  possibly  minimize  detector  performance  degradation 
is  to  use  both  error  detection  and  error  masking.  To  implement  such  a 
scheme  we  replicate  the  original  computing  device  a-1  times,  send  the 
original  data  sample  to  each  device,  and  then  send  all  the  device  out¬ 
puts  d  d~, .  .  . ,  d  to  both  an  error  masker  and  an  error  detector.  The 

1  L  a 

error  masker  operates  as  described  in  Section  III  in  choosing  an  index 

i (m)  and  producing  an  output  d.,  .  .  The  error  detector  compares  the 

i  Imj 

d^'s  and  produces  a  boolean  variable  b  that  equals  zero  if  at  least  § 

d^'s  are  identical,  and  that  equals  one  otherwise.  If  b  =  0,  we  make  a 

decision  concerning  the  presence  or  absence  of  the  signal  using  the 

decision  variable  d.,  If  b  =  1,  we  make  no  decision  concerning  the 

i  Imj 

signal . 


In  this  case,  the  performance  measures  of  the  signal  detector  are 
the  probability  of  detection  and  the  probability  of  false 

alarm  PR^  jj(a,£),  given  that  we  in  fact  make  a  decision  concerning  the 
signal,  and  the  probability  PpR  a ,£)  that  we  do  not  make  a  decision 
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concerning  the  signal  even  though  the  output  of  the  masker  is  equal  to 
d^  (probability  of  false  rejection).  These  quantities  are  defined  as 
follows : 


PD,II(a'^  =  P(di(m)=1lS  and  b=0) 


PFA,II<0-5)  ■  P<di(m)-llsC  a“d  ”-0) 


PFR,II(a'^  “  p<b“1l  di(m)_d*>- 


In  order  to  obtain  bounds  on  these  performance  measures,  we  shall 
assume,  in  addition  to  Hypothesis  2,  that  the  presence  of  the  signal  and 
the  value  of  the  theoretical  decision  variable  are  each  independent  of 
the  number  of  identical  device  outputs.  Thus,  we  are  assuming: 

Hypothesis  5.:  The  events  S  and  (d#=l)  are  each  independent  of  the  event 


(b=0) . 


The  following  theorem  gives  bounds  on  the  probabilities  of  detec- 
tion  and  false  alarm  for  a  signal  detector  implemented  with  an  error 
detector  and  masker. 

Theorem  3_:  If  Hypotheses  2  and  5  are  satisfied,  then 


P, 


FA,  II 


(a,V  <  1  -  P(d 


11 


As  a  first  step  toward  evaluating  the  quantity  P(d.,  .  =d+|  b=0) ,  we 

1 1  m ;  * 

shall  make  the  following  assumption  concerning  the  error  detector. 


Hypothesis  6:  The  error  detector  is  never  faulty. 

Note  that  under  Hypothesis  6,  if  5  <  the  error  detector 

always  produces  b  =  0  and  thus  the  error  detection  and  masking  scheme 

reduces  to  just  the  error  masking  scheme  of  the  previous  section. 

Therefore,  we  shall  always  take  §  2  •  We  can  now  express 

P(d.,  \=d*|  b=0)  as  a  function  of  G( . , . ) . 
l  im;  * 


Lemma  2:  If  Hypotheses  3  and  6  are  satisfied. 


then  for  £  ± 


P(d.,  .=d.|  b=0) 

l(m)  * 


_ G(q.a-£) _ 

1  +  G(q,q-£)  -  G(q,£-1) ’ 


The  next  step  in  evaluating  p(di(m)=d*l  b=0)  consists  in  replacing 
G(.,.)  with  Note  that  Equation  (4)  implies 


_ G(n,q-£) _ 

1  +  G(q,q-£)  -  G(q,£-1) 


v  _ H(q,a-g) _ 

~  1  +  H(q,q-§)  -  H(q,§-1) 


which  immediately  leads  to  the  following  corollary. 


Corollary  3.:  If  Hypotheses  2,  3,  4,  5  and  6  are  satisfied,  then  for  £  > 

Pfl 


pDfn(a^)  >  RII(q,UpD. 


(9) 


PFA,II^a’^  *  1  RjjCa.^Hl  PFA*) 


(10) 


where 


-  12  - 


r  t  e\  _  - E{afa  £) - 

l  +  H(q,q-£)  -  H(a,5-1) 

and  where  H(.,.)  is  given  by  (3). 


(11) 


The  quantity  jj(q,£)  a  measure  °f  the  price  that  must  be 

paid  when  using  the  error  detection  and  masking  scheme.  We  can  obtain  a 
preliminary  evaluation  of  this  quantity  as  follows: 


Lemma  3_:  If  Hypotheses  3  and  6  are  satisfied,  then  for  £  1  p^j”] 


PFR,II<n,?>  “  1  G(a!(a-l)/2)  '  a  odd 


pra.ii<0'?)  *  1  '  a  8ven- 


In  order  to  relate  the  results  given  above  to  the  hardware  relia¬ 
bility,  we  need  the  following  hypothesis. 


Hypothesis  ]_: 

(i)  P(d  =d*)  =  3,  i  =  1,  2,...,  a 

(ii)  The  events  (d^=d*)  ,  i  =  1,  2,...,  a,  are  mutually  independent. 
Hypothesis  7  implies 


G(a,y) 


X  a! 
j=0  J  !  ! 


(i-q)Jg 


jw(a-j) 


(12) 


The  next  lemma  provides  a  relation  between  G(.,.)  and  H(.,.) 


Lemma  4:  If  Hypotheses  4  and  7  are  satisfied,  then  for  £  2 


G(a,fl"£)  G(q,(q-l)/2) 


H(q,q-§)  “  H(q, (q-1) /2) * 


a  odd 
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G(a,g-S)  G(g,g/2) 
H(g,g-£)  ■*  H(g,g/2)' 


a  even. 


The  following  corollary  completes  our  task  by  providing  a  comput¬ 
able  upper  bound  on  PpR  ^(a,^)  . 


Corollary  4:  If  Hypotheses  3,  4,  6  and  7  are  satisfied,  then  for  £  > 

m 


PFR,II(a’^ 


H ( g , g-£ ) 

H(g,(g-l)/2)  ’ 


g  odd 


(13) 


PFR,II(a’§) 


11- 


H(a,g-Q 

H(g,g/2) ' 


a  even 


(14) 


where  H(.,.)  is  given  by  (3). 


V.  CONCLUSION 

We  have  analyzed  three  types  of  detector  implementations.  The 
first  does  not  use  any  redundancy;  the  second  uses  strict  redundancy  for 
error  masking;  and  the  third  uses  strict  redundancy  for  both  error 
detection  and  masking.  In  the  first  two  cases,  we  always  make  a  deci¬ 
sion  concerning  the  presence  of  the  signal,  but  in  the  third  case,  we 
sometimes  make  no  decision  concerning  the  signal.  Thus,  in  addition  to 
the  probabilities  of  detection  and  false  alarm,  which  characterize  the 
first  two  cases,  the  third  case  is  also  characterized  by  the  probability 
of  false  rejection.  In  this  part  of  our  work,  we  derived  the  appropri¬ 
ate  bounds  on  these  figures  of  merit  using  only  physically  reasonable 
assumptions.  The  task  of  exploiting  those  bounds  for  the  design  of 
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efficient  detector  implementations  will  be  carried  out  in  a  subsequent 
paper . 
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APPENDIX 

Proof  of  Theorem  1: 

Let  be  the  event  (d^=d#)  and  let  be  its  complement.  The  defini 
tion  of  P^  implies 

p<yi  s>  X,Y 

D  PIS)  PIS) 

where 

X  =  P(d^=l  and  S  and  B^) 

Y  =  P(d1=l  and  S  and  B°) . 

The  worst  case  for  the  probability  of  detection  occurs  when 

P(dx=l |  S  and  Bj)  =  0 

which  implies  that  Y  =  0.  Since  the  event  (d^=l  and  B^)  is  the  same 
the  event  (d#=l  and  B^  , 

X  =  P(d^=l  and  S  and  B^,)  . 

Then,  using  Hypothesis  1, 

X  =  P(d!>=l  and  S)P(B1> 

=  P(d#=l |  S)P(S)P(B1) 


as 


and  the  first  part  of  the  theorem  follows. 
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The  definition  of  F  .  implies 

FA 


P(d  =1  and  S  ) 

p  _  - 1 - 

FA 


P(SC) 


X  +  Y 

P(SC) 


where 


X  =  P(d1=l  and  S°  and  B1) 

Y  =  P(d^=l  and  Sc  and  B!p  . 

The  worst  case  for  the  probability  of  false  alarm  occurs  when 

P(d1=l|  SC  and  B°)  =  1 

and  therefore,  using  Hypothesis  1, 

Y  i  P(S°  and  B°)  =  P(SC)(1  -  P^)). 

The  fact  that  the  events  (d^l  and  B^)  and  (d#=l  and  B.^)  are  identical 
implies 

X  =  P(d#=l  and  S°  and  B^) 
and  then,  using  Hypothesis  1, 

X  =  P(di>=i  and  SC)P(B1) 


=  P(d*=ll  SC)P(SC)P(B1) 


and  the  second  part  of  the  theorem  follows. 
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Proof  of  Theorem  2: 

Let  he  the  event  (d.,  v=d*)  and  let  B?,  v  be  its  complement. 

lUnJ  x(m)  ♦  i(m)  * 

definition  of  PD  ^.(a)  implies 


PD,I(a) 


P ( d . ,  , =1  and  S ) 
l  \mj _ 

P(S) 


X  +  Y 

P(S) 


where 


X  =  P(d .  ,  » =1  and  S  and  B.,  v) 
i(m)  1  (m) 


Y  =  P(d .  ,  .=1  and  S  and  b',  J. 
i(m)  i (m) 

The  worst  case  for  the  probability  of  detection  occurs  when 

P<di(m)=ll  S  and  Bj(n)>  -  0 

and  therefore  Y  =  0.  Since  the  events  (d.,  . =1  and  B.,  a)  and 

i(m)  i(m) 

(d#=l  and  B^m^)  are  identical, 

X  =  P(d  =1  and  S  and  B.,  .). 
w  l  vm; 

Then,  using  Hypothesis  2, 


X  =  P(d#=l  and  S)P(Bi(m)) 


=  P(d  =l|  S)P(S)P(B.  -  .) 
*  l  (m) 

and  the  first  part  of  the  theorem  follows. 


The  definition  of  P 


PFA,I(a)  " 


FA,  I 
P(d . 

l 


(a)  implies 

,  ,=1  and  S°) 
(m) 

P(S°) 


X  +  Y 

P(S°) 


The 
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where 


X  -  ,  *=1  and  S°  and  B.,  v) 

i(m) 


Y  =  P(d. t  >=1  and  S°  and  B?,  ,). 
i(m)  i(m) 


The  worst  case  for  the  probability  of  false  alarm  occurs  when 


p(d.(in).l|  S°  and  B?(ni) )  =1 


and  therefore,  using  Hypothesis  2, 

Y  i  P(SC  and  B? ,  .)  =  P(SC)(1  -  P(B.,  .)). 

lU)  lUJ 

Since  the  events  and  B^mj)  and  (d*=l  and  B^m^)  are  identical, 

X  =  P(d  =1  and  S°  and  B.,  N) 

♦  l  (m) 

\ 

and  then,  using  Hypothesis  2, 


X  =  P(d  =1  and  S°)P(B. ,  , ) 

*  i(m) 


=  P(d  =1 |  S  )P(SC)P(B. ,  ) 

*  i(m) 


and  the  second  part  of  the  theorem  follows, 


Proof  of  Theorem  3 : 


The  definition  of  PD  i;i(a,£)  implies 

P(d. /  ^=1  and  S  and  b=0)  v  ,  v 

p  _  X  +  Y 

D,ira'5'  P(S  and  b=0)  P(S  and  b=0) 


where 
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X  =  an<l  S  and  b=0  and  B^m^) 

Y  =  P(d.,  »=1  and  S  and  b=0  and  B?,  *). 
i(m)  i(m) 

The  worst  case  for  the  probability  of  detection  occurs  when 

P(d.,  ,=l|  S  and  b=0  and  B?,  J  =0 

i(m)  i(m) 

and  therefore  Y  =  0.  Since  the  events  (d.,  * =1  and  B.,  v)  and 

i(m)  1 (m) 

(d^^l  and  are  identical. 


X  =  P(d  =1  and  S  and  b=0  and  B.,  ,) 
*  i  (in) 


Then,  using  Hypotheses  2  and  5, 


X  =  P(d  =1  and  S)P(b=0  and  B.,  ,) 

*  i(m) 


=  P(d  =1 |  S)P(S)P(b=0  and  B.,  J 
♦  i(m) 

and  the  first  part  of  the  theorem  follows. 


The  definition  of  P^  jj(a,£)  implies 


PFA,II(a'^ 


P(d . /  ,=1  and  S  and  b=0) 
P(SC  and  b=0) 


X  +  Y 


P(S^  and  b=0) 


where 


X  =  P(d.,  v=l  and  SC  and  b=0  and  B .  (  v) 
i(m)  x(m) 

Y  =  P(d.  .  ,=1  and  SC  and  b=0  and  Bc.  ,). 
i(m)  l  (m) 
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The  worst  case  for  the  probability  of  false  alarm  occurs  when 


P(d.,  x  =1  |  SC  and  b=0  and  B?,  .)  =  1 
llm)  i(m) 


and  therefore,  using  Hypotheses  2  and  5, 

Y  £  P(SC  and  b=0  and  B?,  ,)  =  P(S°)P(b=0  and  Bc,  J 

lUn;  x\m) 

Since  the  events  (d. ,  x =1  and  B.,  x)  and  (d.=l  and  B.,  *)  are  identical, 

i (m)  i(m)  *  l (m) 

X  =  P(d  =1  and  S°  and  b=0  and  B.,  .) 

*  i(m) 

and  then,  using  Hypotheses  2  and  5, 

X  =  P(d*=l  and  S°)P(b=0  and  B . ,  >  ) 

*  i  (m) 

=  P(d„=l|  SC)P(Sc)P(b=0  and  Bi(m)) 
and  the  second  part  of  the  theorem  follows. 

Proof  of  Lemma  2: 

If  ?  1  IVI,  the  events  (d.,  x  =d .  and  b=0)  ,  (at  least  £  device 
outputs  equal  d#)  and  (at  most  a-£  device  outputs  do  not  equal  d#)  are 
equivalent.  Also,  the  event  (b=0)  is  equal  to  the  union  of  the  two  dis¬ 
joint  events  (at  least  £  device  outputs  equal  d^)  and  (at  least  £  device 
outputs  do  not  equal  d#) .  It  follows  that 


P(di(m)=d*1  b=0)  = 


P(di(m)=d.  and  b=0) 
P(b=0) 


G(q.q-E) 


1  +  G(q,q-$)  -  G(q,£-1) 
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and  the  lemma  is  proved. 


Proof  of  Lemma  3: 


The  definition  of  PpR  ^(a,^)  implies 
PFR,II(a’^  =  1  P(b=0'  di(m)=d*) 


P(b=0  and  d.(n)=d.) 
1  p(d., 

i(m)  * 


As  in  the  proof  of  Lemma  2,  if  5  ±  •  then 


P(di(m)=d*  and  b=0)  =  G(-a>a~V 


The  proof  is  completed  using  Lemma  1 


Proof  of  Lemma  4: 


Let  a  be  odd  and  5  2  Then,  letting  w  =  (l-q)/q  and  w 

(1-(I)/(J,  Equations  (3)  and  (12)  imply 


( a-1 ) / 2 

G ( a , ( a— 1 ) / 2 )  =  G(a,a-£)  +  qa  2 

j  =a-i;+l 


_aJ -  ~j 


j ! (a-j) 1 


ttt  ® 


(a-1) /2  , 

H(a,(a-l)/2)  =  H(a,a~5)  +  qa  2  -a!-  w-» . 

j«a-q+lJ  a~J 


The  desired  result  will  be  true  if  and  only  if 


( a-1 ) / 2 


G(a,a-5)q°  J  .  ,  , a !  ...  >  H(a, a-5)o[a  2  .  .  ,a! T  w 


( a-1 ) / 2 


aj 


or,  equivalently,  if  and  only  if 
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a-£  ( a-1 ) / 2 

z  z 

i=0  j=a-£+l 


a! 


al 


i! (a-i) ! j ! (a-j) ! 


(wSi^-^w1) 


Now,  Equation  (4)  implies  that  w  ±  yf,  and  since  j  >  i 
quality  holds  and  the  first  part  of  the  lemma  follows 
second  part  of  the  lemma  is  similar  to  the  above. 


2  0. 

,  the  above  ine- 
.  The  proof  of  the 


